SafeMode - Analysis: meta.com.cobblestonesw.com

Captura Visual

Screenshot of meta.com.cobblestonesw.com

Informações de Detecção

http://meta.com.cobblestonesw.com/

Detected Brand

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1C333E9707302A1670267C9F9A831B7C6A383A1DEDF96D054FAED933629C7FB0A90541D
CONTENT ssdeep	1536:jgTmnIyzOcLvXdveRE0UznIFKYZdP9Wqvto1dCSzLeEGoEYxt4gmwoNz+BSnE5jr:+mFqvto1ASzLeEGoEYxt4gmwoNoSEZr

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	9493ceedc9631316
VISUAL aHash	ffff040000000000
VISUAL dHash	808c4c54165e6424
VISUAL wHash	ffff8e888a868212
VISUAL colorHash	09e00000000
VISUAL cropResistant	808c4c54165e6424,8cc2c0727cf8b87c,0c5c17141e4c2434

Análise de Código

Risk Score 97/100

Nível de Ameaça ALTO

⚠️ Phishing Confirmed

🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info

🔒 Obfuscation Detected

atob
eval
fromCharCode
unescape
unicode_escape
base64_strings

🎯 Kit Endpoints

https://meta.com.cobblestonesw.com/blog/rss/?cb_subdomain=www&cb_site_base=meta.com

📡 API Calls Detected

GET
POST

📊 Detalhamento da Pontuação de Risco

Total Risk Score

100/100

Contributing Factors

Active Phishing Kit

Detected kit types: Credential Harvester, OTP Stealer, Card Stealer, Banking, Personal Info

Code Obfuscation

JavaScript code obfuscated using 604 technique(s) to evade detection

🔬 Análise Integral de Ameaças

Tipo de Ameaça

Banking Credential Harvester

Alvo

Meta users

Método de Ataque

obfuscated JavaScript

Canal de Exfiltração

Form submission (backend endpoint not detected - likely JavaScript-based)

Avaliação de Risco

CRITICAL - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

Kit types: Credential Harvester, OTP Stealer, Card Stealer, Banking, Personal Info
604 obfuscation techniques

🏢 Análise de Falsificação de Marca

Impersonated Brand

⚔️ Metodologia de Ataque

Primary Method: Credential Harvesting

Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.

Secondary Method: JavaScript Obfuscation

Malicious code is obfuscated using 604 techniques to evade detection by security scanners and make reverse engineering more difficult.

🌐 Indicadores de Compromisso de Infraestrutura

Domain Information

Domínio

meta.com.cobblestonesw.com

Registered

2023-11-07 21:22:10+00:00

Registrar

Cloudflare, Inc.

Estado

Active (older domain)

Hosting Information

Provider